Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/DyVyCEFBxJLYyRvM7XsX4dBdsLU.roa
File: DyVyCEFBxJLYyRvM7XsX4dBdsLU.roa (raw, json)
Hash identifier: lVUYTgdNXwjZ+ZTF3d4kS4LTgcKMEbkMijY/zgpSPUI=
Subject key identifier: 0F:25:72:08:41:41:C4:92:D8:C9:1B:CC:ED:7B:17:E1:D0:5D:B0:B5
Certificate issuer: /CN=5d90c1cb9004af085393363cf8025180356fad9e
Certificate serial: 018572C36EA582361531523797D1BC20AE85
Authority key identifier: 5D:90:C1:CB:90:04:AF:08:53:93:36:3C:F8:02:51:80:35:6F:AD:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZDBy5AErwhTkzY8-AJRgDVvrZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/DyVyCEFBxJLYyRvM7XsX4dBdsLU.roa
Signing time: Mon 02 Jan 2023 13:54:48 +0000
ROA not before: Mon 02 Jan 2023 13:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 193.3.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:6e:a5:82:36:15:31:52:37:97:d1:bc:20:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d90c1cb9004af085393363cf8025180356fad9e
Validity
Not Before: Jan 2 13:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f2572084141c492d8c91bcced7b17e1d05db0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:fc:43:70:7d:e8:52:3c:72:4d:08:6d:76:
2d:6d:5b:fb:88:8a:23:38:42:96:83:68:51:d2:60:
bc:6c:6a:0d:08:6a:83:83:f2:9f:48:76:01:c0:66:
20:d1:89:7b:43:97:cd:d1:6b:35:85:63:91:27:fa:
8b:cf:6b:10:22:a8:55:ce:ec:99:8a:74:bc:8d:96:
79:c2:8a:be:3e:5c:c5:35:c1:46:bf:e6:c0:34:02:
7f:9e:4e:aa:54:78:0c:75:20:50:e9:8a:5b:1c:25:
24:0a:40:55:c5:94:d5:b8:0f:49:e3:6d:a0:51:74:
db:c5:c8:59:3c:d7:9f:75:97:33:64:43:9a:f1:c9:
77:a6:8f:05:62:6b:d3:b4:ba:62:d0:3a:21:60:7c:
3a:0b:95:46:15:7a:fa:18:a1:1f:80:0c:05:bd:0d:
ef:fa:32:a1:f0:93:17:2c:2b:00:f4:b3:13:4c:e7:
25:1b:a9:5f:f0:0e:19:d0:e2:1f:5b:40:b2:43:46:
17:70:63:9f:88:e9:df:27:55:4a:3c:21:6e:04:b9:
b5:89:cd:9a:f0:2b:bc:08:e9:35:7b:f8:ca:14:c6:
ff:67:2f:e6:da:f5:b7:ac:af:9b:d0:ce:57:39:b3:
d2:4e:21:41:23:b7:d1:10:4b:d8:31:59:99:9a:c3:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:72:08:41:41:C4:92:D8:C9:1B:CC:ED:7B:17:E1:D0:5D:B0:B5
X509v3 Authority Key Identifier:
keyid:5D:90:C1:CB:90:04:AF:08:53:93:36:3C:F8:02:51:80:35:6F:AD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZDBy5AErwhTkzY8-AJRgDVvrZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/DyVyCEFBxJLYyRvM7XsX4dBdsLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/XZDBy5AErwhTkzY8-AJRgDVvrZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2f:44:7f:89:ef:54:0a:7b:4b:e9:4b:42:95:d6:7a:d6:7d:
4d:53:a1:5c:e3:98:9c:43:40:72:f6:55:46:d5:6b:1e:10:b3:
3a:fc:e7:b6:0d:1b:da:51:e5:fb:5c:53:6e:08:b9:19:22:0f:
a8:77:1a:05:90:60:03:58:53:e0:e7:e8:8e:d9:91:99:7c:72:
32:f1:3d:84:1b:3f:65:3b:ed:cf:bd:8f:3b:55:fc:3b:25:90:
68:86:0c:22:3e:66:14:a2:aa:0c:69:c4:05:0c:bc:4c:d0:41:
f4:dc:10:22:af:d2:b2:0a:07:a7:79:0c:af:39:4a:29:85:83:
f9:31:3a:f0:33:33:83:5f:ea:d3:21:76:43:3b:dd:32:82:85:
89:de:16:79:a7:ac:b8:f5:b6:ba:16:8f:11:7e:5c:84:ed:f4:
9a:45:7b:15:51:74:85:85:ac:3e:17:64:ec:b5:d4:bd:34:7c:
69:fc:d8:b9:66:b6:80:86:bb:df:40:01:ce:02:25:1c:69:aa:
72:7e:52:05:f3:f3:20:7c:ea:9c:11:28:27:75:bf:90:43:43:
3d:33:de:25:68:c0:23:72:5d:fc:1d:10:3b:81:00:8f:15:fe:
97:71:82:66:80:b0:5f:a2:22:08:17:36:42:db:df:0b:53:e6:
16:28:e3:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyw26lgjYVMVI3l9G8IK6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTBjMWNiOTAwNGFmMDg1MzkzMzYzY2Y4MDI1MTgwMzU2
ZmFkOWUwHhcNMjMwMTAyMTM1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjI1NzIwODQxNDFjNDkyZDhjOTFiY2NlZDdiMTdlMWQwNWRiMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfr8Q3B96FI8ck0IbXYtbVv7iIoj
OEKWg2hR0mC8bGoNCGqDg/KfSHYBwGYg0Yl7Q5fN0Ws1hWORJ/qLz2sQIqhVzuyZ
inS8jZZ5woq+PlzFNcFGv+bANAJ/nk6qVHgMdSBQ6YpbHCUkCkBVxZTVuA9J422g
UXTbxchZPNefdZczZEOa8cl3po8FYmvTtLpi0DohYHw6C5VGFXr6GKEfgAwFvQ3v
+jKh8JMXLCsA9LMTTOclG6lf8A4Z0OIfW0CyQ0YXcGOfiOnfJ1VKPCFuBLm1ic2a
8Cu8COk1e/jKFMb/Zy/m2vW3rK+b0M5XObPSTiFBI7fREEvYMVmZmsM2HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8lcghBQcSS2MkbzO17F+HQXbC1MB8GA1UdIwQY
MBaAFF2QwcuQBK8IU5M2PPgCUYA1b62eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpEQnk1QUVyd2hUa3pZOC1BSlJnRFZ2clo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNGQyZDYtMWQ5ZS00Nzg3LWI5Nzgt
MzhmMzkyMmVkMTE0LzEvRHlWeUNFRkJ4SkxZeVJ2TTdYc1g0ZEJkc0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNGQyZDYtMWQ5ZS00Nzg3LWI5NzgtMzhmMzkyMmVkMTE0
LzEvWFpEQnk1QUVyd2hUa3pZOC1BSlJnRFZ2clo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO2MA0G
CSqGSIb3DQEBCwUAA4IBAQAKL0R/ie9UCntL6UtCldZ61n1NU6Fc45icQ0By9lVG
1WseELM6/Oe2DRvaUeX7XFNuCLkZIg+odxoFkGADWFPg5+iO2ZGZfHIy8T2EGz9l
O+3PvY87Vfw7JZBohgwiPmYUoqoMacQFDLxM0EH03BAir9KyCgeneQyvOUophYP5
MTrwMzODX+rTIXZDO90ygoWJ3hZ5p6y49ba6Fo8RflyE7fSaRXsVUXSFhaw+F2Ts
tdS9NHxp/Ni5ZraAhrvfQAHOAiUcaapyflIF8/MgfOqcESgndb+QQ0M9M94laMAj
cl38HRA7gQCPFf6XcYJmgLBfoiIIFzZC298LU+YWKOPh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-fra.rpki-client.org